Webinar Description
Key Takeaways
- Focuses on meeting Digital Operational Resilience Act (DORA) requirements, which took effect January 17, 2025
- Combines regulatory expertise with technical guidance on using network evidence for compliance
- Addresses ICT asset visibility gaps, shadow IT detection and limitations of endpoint-only security
- Designed for CISOs, compliance officers, IT risk managers and security leaders in financial services and regulated industries
- Covers practical approaches to generating audit-ready evidence and preparing for Threat-Led Penetration Testing (TLPT)
About the Event
Digital Security Instituut and Corelight present this webinar combining independent regulatory expertise with technical specialisation in network detection and response (NDR). The session pairs a DORA expert with a Corelight technical specialist to address both what regulators expect from organisations and how network evidence can satisfy those expectations.
DORA Compliance Challenges
The Digital Operational Resilience Act establishes requirements for financial sector organisations to demonstrate their ability to withstand, respond to and recover from ICT-related disruptions. Since taking effect in January 2025, regulated entities must prove their digital operational resilience with evidence that meets regulatory scrutiny.
The webinar addresses several practical compliance challenges. Organisations often struggle with visibility gaps across their ICT assets, particularly unmanaged devices and shadow IT that fall outside traditional monitoring. Endpoint detection alone leaves blind spots that can undermine compliance posture during audits or resilience testing.
Network Evidence for Compliance
A central theme of the session is transforming raw network telemetry into structured, audit-ready compliance evidence. Network Detection and Response technology provides continuous monitoring capabilities that can capture activity across the entire network environment, including assets that endpoint agents cannot reach.
The webinar explores how this approach supports Threat-Led Penetration Testing (TLPT) requirements and ongoing compliance reporting. By converting network data into documented evidence, organisations can substantiate their resilience posture when regulators or auditors require proof.
Who Should Attend
This webinar is designed for security and compliance professionals in financial institutions and other sectors subject to DORA or NIS2 regulations. Relevant roles include CISOs, Heads of Security, IT Risk Managers and Compliance Officers responsible for demonstrating digital resilience. Senior executives and board members with oversight of operational resilience programmes may also find the regulatory and strategic content valuable.